What I've Been Observing
For several months now, I've been monitoring various Telegram groups and underground forums. What I've witnessed is a massive, sophisticated money laundering operation that operates in plain sight, using ordinary people as unwitting (or sometimes willing) accomplices to wash the proceeds of phishing schemes, credit card fraud, and online scams.
People are renting out their accounts on platforms like:
- Papara (Turkish digital wallet)
- Parolapara (payment platform)
- Ininal (prepaid card system)
- Bitexen (cryptocurrency exchange)
- Other local and international electronic money institutions
They think they're making easy money. They have no idea what they're actually facilitating.
How the System Works
Step 1: Recruitment
People called "setçiler" (collectors/agents) recruit account holders through Telegram groups, social media, and word of mouth. The pitch is simple:
- "Rent your Papara account for 1,000 TL per month"
- "Just let us use your account, you keep the card"
- "No risk, easy money"
- "Thousands of people are doing it"
Students, unemployed people, and anyone struggling financially—they're the primary targets. The amounts seem small and harmless: 500 TL, 1,000 TL, maybe 2,000 TL per month.
Step 2: Collection
The "setçi" collects these accounts—sometimes dozens, sometimes hundreds. They're not individual operators; they're part of a larger cybercrime syndicate serving phishing rings and extortionists.
These accounts are pooled together into a massive, decentralized distribution system designed to clean dirty money.
Step 3: The Laundering Operation
When a scam syndicate needs to move stolen money out of its vault, here's what happens:
- The syndicate notifies the network of "şahacılar" (those who receive the transfers).
- Stolen money is distributed across thousands of these rented accounts.
- Small amounts go into each account—usually under transaction limits that trigger automatic AML (Anti-Money Laundering) reporting.
- The money is then extracted, consolidated, converted to untraceable crypto, and cleaned.
- The trail becomes nearly impossible for authorities to follow.
Why This System Exists
The Scammer's Dilemma
Cybercrime generates massive amounts of dirty money. Scammers cannot legally process these illicit payments. Stolen funds deposited into traditional bank accounts are quickly traced, frozen, and seized. So they need a way to:
- Accept deposits from scam victims.
- Move money in and out of the country.
- Avoid detection and law enforcement seizure.
Since traditional banking algorithms catch them instantly, they turn to loosely regulated electronic money institutions and cryptocurrency platforms, utilizing "mules" to break the trail.
The Perfect Cover
Using thousands of individual accounts provides criminals with:
- Distributed risk: No single account has activity suspicious enough to trigger major alarms.
- Plausible deniability: Each individual transaction mimics peer-to-peer transfers.
- Scale: Syndicates can move massive amounts of stolen capital while staying under the radar.
- Expendable participants: If a rented account gets frozen, the scammers simply recruit new ones.
Who Gets Punished?
Here's the truly sinister part: when authorities finally crack down, who do they catch?
Not the mastermind scammers. They operate through encrypted channels, VPNs, and multiple layers of intermediaries, often based offshore.
Not the mid-level organizers. They insulate themselves well.
The authorities catch the account holders. The students, the unemployed, the desperate people who thought they were making an easy 1,000 TL per month.
The Legal Consequences
When these operations get busted, the fallout is devastating for the "mules":
- The account holders get charged with facilitating fraud and money laundering.
- They face criminal records, massive fines, and potential jail time.
- Their financial identity gets permanently blacklisted.
- They become unemployable in many sectors.
That 1,000 TL per month rental could cost them everything.
The International Dimension
While I'm describing Turkey's system specifically, identical operations exist globally:
- In Europe: Revolut, N26, and TransferWise accounts are rented out.
- In Asia: Local payment apps and WeChat wallets.
- In Africa: Mobile money systems like M-Pesa.
- Globally: Cryptocurrency exchange accounts and P2P platforms.
Red Flags: Are You Being Recruited?
If someone approaches you with any of these offers, you are being recruited into a cybercrime money laundering ring:
- "Rent your [payment app] account for easy money."
- "Just let us use your account, you keep the card."
- "Receive and forward payments, take a cut."
- "Help us move money, it's totally legal."
- "You won't be responsible, we handle everything."
All of these are lies.
Why I'm Writing This
I've seen the devastating impact of cybercrime on innocent people. I've watched vulnerable populations targeted by these syndicates. The scammers make millions, the organizers make millions, and the account holders? They get a fraction of a fraction, followed by a criminal record when it all comes crashing down.
If You're Already Involved
If you've rented out your account, you need to act immediately:
- Stop immediately: Change your passwords and lock them out of the account.
- Document everything: Save all communications, transaction IDs, and evidence.
- Consult a lawyer: You may already be in legal trouble and need professional advice.
- Never do it again: One criminal record is enough to ruin your future.
Secure Infrastructure Matters
At PayCow, we build secure, enterprise-grade custodial payment infrastructure designed to protect legitimate businesses from fraud. Stay vigilant, stay secure.